IN THE CLAIMS 

1. (Currently Amended) A method, comprising the steps of: 
receiving a record; 

qualifying an access to the record by referencing a set of access rules for the 
record , stored in a database, and defined under a legally enforceable trust agreement 
establishing a trust granting legal control over the record to a trustee, on behalf of a 
beneficiary; and 

applying an appropriate set of access rules , retrieved from the database, to limit 
access to the record^ by means of an automated system, the limitations being enforced 
under authority of a trustee applying the access rules to selectively limit access to the 
record in accordance with the trust agreement. 

2. (Previously Presented) The method according to claim 1, wherein 
the record is encrypted, further comprising the step of accounting for a decryption of the 
record after access to at least a portion thereof 

3. (Original) The method according to claim 2, wherein said accounting 
is anonymous. 

4. (Previously Presented) The method according to claim 1, wherein 
the record has a plurality of portions, at least one portion being encrypted with at least 
one cryptographic key, said portions being independently accessible, said access rules 
applying to selectively limit access to portions of the record. 

5. (Original) The method according to claim 4, wherein said access rules 
limit access to portions based on an identity of an intended recipient. 

6. (Previously Presented) The method according to claim 1, further 
comprising the step of supplying a decryption key for a respective record portion in 
accordance with the applied set of rules. 

7. (Previously Presented) The method according to claim 1, further 
comprising the step of accounting for attempted access to at least a portion of the record. 
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8. (Original) The method according to claim 1, wherein the set of access 
rules are associated with an intended recipient of the record. 

9. (Original) The method according to claim 1, fUrther comprising the 
step of referencing an index to define a record. 

10. (Original) The method according to claim 9, wherein the index further 
stores a set of access rules for qualifying an intended recipient with respect to each of the 
records. 

11. (Original) The method according to claim 1, further comprising the 
step of using an index to identify a record potentially responsive to a query. 

12. (Original) The method according to claim 1, further comprising the 
step of using an index comprising a set of associations of patient identities and medical 
transaction records to identify records relating to a respective patient. 

13. (Original) The method according to claim 1, further comprising the 
step of using an index comprising a set of associations of record identification, record 
characteristic, and said access rules to identify records relating to a query and limiting 
access to portions thereof 

14. (Original) The method according to claim 1, wherein the record 
comprises a plurality of portions, the portions being separately encrypted and having 
associated sets of independent rules. 

15. (Original) The method according to claim 1, wherein the access rules 
are role based access rules relating to a role of the intended recipient. 

16. (Original) The method according to claim 1, wherein the access rules 
are context based access rules relating to a context of record access. 

17. (Previously Presented) The method according to claim 1, wherein 
the access rules are defined by a grantor of the trust. 
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18. (Previously Presented) The method according to claim 1, wherein 
the record is encrypted, and a decryption of the record triggers a remotely- sensed 
transaction. 

19. (Original) The method according to claim 18, wherein the remotely 
sensed transaction comprises a financial accounting transaction. 

20. (Original) The method according to claim 18, wherein the remotely 
sensed transaction comprises an access audit trail transaction. 

21. (Original) The method according to claim 2, wherein said accounting 
occurs upon supply of the respective decryption key. 

22. (Original) The method according to claim 2, wherein said accounting 
occurs upon use of the respective decryption key. 

23. (Original) The method according to claim 1, wherein the record 
comprises a medical record. 

24. (Original) The method according to claim 1, wherein the record 
comprises a media content record. 

25. (Previously Presented) The method according to claim 1, wherein 
the access rules are interpreted in accordance with a database of jurisdictional trust laws. 

26. (Previously Presented) The method according to claim 1, wherein 
the set of access rules are interpreted in accordance with a database of jurisdiction- 
dependent privacy laws. 

27. (Previously Presented) The method according to claim 1, further 
comprising the step of creating a trust comprising the record, implemented in accordance 
with the trust laws of a specified jurisdiction. 

28. (Previously Presented) The method according to claim 1, wherein 
the record comprises separate articles within a digital publication. 
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29. (Original) The method according to claim 1, further comprising the 
step of receiving the set of access rules. 

30. (Original) The method according to claim 1, further comprising the 
step of generating the set of access rules based on the record. 

31. (Previously Presented) The method according to claim 1, wherein 
the record is encrypted with an encryption scheme having a rolling code. 

32. (Original) The method according to claim 1, wherein the trustee 
controls the records and implements the access rules without requiring access to a content 
of the record. 

33. (Previously Presented) The method according to claim 1, wherein 
the trustee acts without requiring access to the records. 

34. (Original) The method according to claim 1, wherein the trustee 
selectively processes the records. 

35. (Original) The method according to claim 1, wherein the records 
comprise a type selected from the group consisting of legal information, government 
records, financial records, commercially valuable trade secret legal information, 
manufacturing information, banking information, consumer entertainment media, digital 
music files, video information, cinema information, consumer information, personal 
demographic information, credit card information, personal contact information, social 
security number information, publication information, separate articles within a digital 
publication, and investment account information. 

36. (Previously Presented) The method according to claim 1, wherein 
the record comprises a patient file, placed in a privileged trust for the patient with a 
trustee, said trustee implementing the set of rules for access with respect to each 
transaction record within the patient file defined by the patient and legal jurisdiction, 
wherein said trustee interacts with the patient record information to at least one of 
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maintain, process, receive, deliver, and transmit portions of the patient record in secure 
and verifiable fashion to authorized entities in compliance with the trust. 

37. (Previously Presented) The method according to claim 1, wherein 
the record comprises a corpus of a medical information trust for holding medical records 
on behalf of a patient distinct from the caregiver; the trustee charging for access to the 
medical record, and maintaining a record of each access of the medical record. 

38. (Previously Presented) The method according to claim 1, wherein 
the trust has a beneficiary and access rules are applied to limit access by an identified 
intended recipient, without communicating an identity of the intended recipient to the 
beneficiary. 

39. (Currently Amended) A method, comprising the steps of: 

placing information in legal trust with under control of a trustee on behalf of a 
beneficiary , said information being stored in electronically readable form ; 

automatically authorizing access to the information in trust based on compliance 
with a trust-defined rule, including requiring an electronic communication between a user 
and the trustee; and 

permitting an authorized user to access the information in the trust through an 
electronic communication . 

40. (Original) The method according to claim 39, wherein the rule 
comprises a compensation rule for obtaining a right to the information. 

41. (Original) The method according to claim 40, wherein the electronic 
communication comprises an electronic funds transfer. 

42. (Original) The method according to claim 40, wherein the 
compensation rule is integrally associated with the information, and wherein the 
implementing occurs as a result of user interaction with the information. 
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43. (Original) The method according to claim 39, wherein the information 
comprises a patient medical record. 

44. (Original) The method according to claim 39, wherein the information 
comprises consumer entertainment media. 

45. (Previously Presented) The method according to claim 39, wherein 
the trustee is interposed between the beneficiary and the user, the trustee maintaining an 
anonymity of the user while accounting to the beneficiary. 

46. (Previously Presented) The method according to claim 39, wherein 
the trustee is interposed between the beneficiary and the user, the trustee characterizing 
the user based on a classification of information usage, while accounting to the 
beneficiary for the use, without specifically identifying information usage of a user. 

47. (Previously Presented) The method according to claim 39, wherein 
a transfer of the information to the user requires an electronic transfer of value from the 
user to the trustee, further comprising the step of accepting the value by the trustee while 
stripping an identification of the user from a retained transfer record. 

48. (Original) The method according to claim 39, further comprising the 
steps of receiving an identification of desired information content from a user; and 
logging the access employing a digital signature of the user. 

49. (Original) The method according to claim 48, wherein the digital 
signature is anonymous with respect to the beneficiary. 

50. (Previously Presented) The method according to claim 48, wherein 
the authorizing step entails requiring the user to enter into a restrictive covenant. 

5 1 . (Original) The method according to claim 40, wherein the trustee 
manages access to the information and implements the access rules as an intermediary 
for, and communicates compensation information to, the beneficiary. 
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52. (Previously Presented) The method according to claim 40, wherein 
the information has an associated compensation value, and comprises digital media 
information, said digital media information being associated with subsidy content having 
an associated subsidy value, further comprising the step of accounting for use of the 
digital media information offset by the subsidy value. 

53. (Currently Amended) A method, comprising the steps of: 
defining information content and associated access rules; 

electronically transmitting the information content and associated access rules to a 
trustee und e r subject to the terms of a trust agreement; 

storing the transmitted information content and associated access rules; and 

automatically implementing, under control of the trustee, the associated access 
rules with respect to the information content, to establish a virtual trust in accordance 
therewith , whereby the trustee selectively authorizes access to the information content to 
selectively permit communication of the information content . 

54. (Original) The method according to claim 53, wherein the information 
content comprises media information, and the associated access rules comprise economic 
rules. 

55. (Original) The method according to claim 53, wherein the information 
content comprises medical record information, and the associated access rules comprise 
restrictive access rules based on an identity or characteristic of the user. 

56. (Original) The method according to claim 55, further comprising the 
step of transmitting, from the trustee, information content in accordance with the 
associated rules. 

57. (Original) The method according to claim 53, wherein the trustee 
controls the information content and implements the rules without requiring access to the 
information content. 
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58. (Currently Amended) A database system, comprising a plurality of 
records, each record having an associated set of access rules, means for automatically 
applying the appropriate set of access rules to limit control access to the record, the 
limitation s access control being enforced by a trustee operating under an established legal 
trust and applying the access rules on behalf of a beneficiary in accordance with the legal 
trust. 

59. (Previously Presented) The system according to claim 58, wherein 
the record is encrypted, further comprising means for accounting for a decryption of the 
record. 

60. (Original) The system according to claim 59, wherein said accounting 
is anonymous. 

61. (Original) The system according to claim 58, wherein the record has a 
plurality of portions, each portion being encrypted with at least one cryptographic key, 
said portions being independently accessible, said access rules applying to selectively 
limit access to portions of the record. 

62. (Original) The system according to claim 61, wherein said access 
rules limit access to portions based on an identity of an intended recipient. 

63. (Previously Presented) The system according to claim 58, wherein 
the record comprises a plurality of encrypted portions, further comprising the step of 
supplying a decryption key for a respective record portion in accordance with the applied 
set of rules. 

64. (Previously Presented) The system according to claim 58, wherein 
at least a portion of the record is encrypted, further comprising an accounting system for 
accounting for a decryption of a portion of the record. 

65. (Original) The system according to claim 58, wherein the set of access 
rules are associated with an intended recipient of the record. 
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66. (Original) The system according to claim 58, further comprising the 
step of referencing an index to define a record. 

67. (Original) The system according to claim 66, wherein the index 
further stores a set of access rules for qualifying an intended recipient with respect to 
each of the records. 

68. (Original) The system according to claim 67, further comprising the 
step of using an index to identify a record potentially responsive to a query. 

69. (Previously Presented) The system according to claim 58, wherein 
the record comprises a medical record, and wherein an index of a set of associations of 
patient identities and medical transaction records is used to identify records relating to a 
respective patient. 

70. (Original) The system according to claim 58, wherein an index of a 
set of associations of record identification, record characteristic, and said access rules to 
identify records relating to a query and limiting access to portions thereof. 

71. (Original) The system according to claim 58, wherein the record 
comprises a plurality of portions, the portions being separately encrypted and having 
associated therewith sets of independent rules. 

72. (Previously Presented) The system according to claim 58, wherein 
the access rules are role based access rules relating to a role of an intended recipient. 

73. (Original) The system according to claim 58, wherein the access rules 
are context based access rules relating to a context of record access. 

74. (Previously Presented) The system according to claim 58, wherein 
the access rules are defined by a grantor of the trust. 

75. (Original) The system according to claim 58, wherein a decryption of 
the record triggers a remotely-sensed transaction. 


Felsher-201.1 


- 10- 


76. (Original) The system according to claim 75, wherein the remotely 
sensed transaction comprises a financial accounting transaction. 

77. (Original) The system according to claim 75, wherein the remotely 
sensed transaction comprises an access audit trail transaction. 

78. (Original) The system according to claim 59, wherein said accounting 
occurs upon supply of the respective decryption key. 

79. (Original) The system according to claim 59, wherein said accounting 
occurs upon use of the respective decryption key. 

80. (Original) The system according to claim 58, wherein the record 
comprises a medical record. 

81. (Original) The system according to claim 58, wherein the record 
comprises a media content record. 

82. (Previously Presented) The system according to claim 58, wherein 
the access rules are interpreted in accordance with a database of jurisdictional trust laws. 

83. (Previously Presented) The system according to claim 58, wherein 
the set of access rules are interpreted in accordance with a database of jurisdiction- 
dependent privacy laws. 

84. (Original) The system according to claim 58, further comprising the 
step of creating a virtual trust encompassing the record, implemented in accordance with 
the trust laws of an associated jurisdiction. 

85. (Original) The system according to claim 58, wherein the records 
comprise separate articles within a digital publication. 

86. (Original) The system according to claim 58, further comprising the 
step of receiving the set of access rules. 
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87. (Original) The system according to claim 58, further comprising the 
step of generating the set of access rules based on the record. 

88. (Previously Presented) The system according to claim 58, wherein a 
record is encrypted with an encryption scheme having a rolling code. 

89. (Original) The system according to claim 58, wherein the trustee 
controls the records and implements the access rules without requiring access to a content 
of the record. 

90. (Original) The system according to claim 58, wherein the trustee 
controls access to the records. 

91. (Original) The system according to claim 58, wherein the trustee 
selectively processes the records. 

92. (Original) The system according to claim 58, wherein the records 
comprise a type selected from the group consisting of legal information, government 
records, financial records, commercially valuable trade secret legal information, 
manufacturing information, banking information, consumer entertainment media, digital 
music files, video information, cinema information, consumer information, personal 
demographic information, credit card information, personal contact information, social 
security number information, publication information, separate articles within a digital 
publication, and investment account information. 

93. (Previously Presented) The system according to claim 58, wherein a 
record comprises a patient file, placed in a privileged trust for the patient with a trustee, 
said trustee implementing the set of rules for access with respect to each transaction 
record within the patient file, said rules being defined by the patient and legal 
jurisdiction, wherein said trustee interacts with the patient record information to at least 
one of maintain, process, receive, deliver, and transmit portions of the patient record in 
secure and verifiable fashion to authorized entities in compliance with the trust. 
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94. (Previously Presented) The system according to claim 58, wherein a 
record comprises a corpus of a medical information trust for holding medical records on 
behalf of a patient, distinct from the caregiver; the trustee charging for access to a 
medical record, and maintaining a record of each access of said medical record. 

95. (Original) The system according to claim 58, wherein access rules are 
applied to an identified intended recipient without communicating an identity of the 
intended recipient to the respective beneficiary. 

96. (Currently Amended) A system, comprising: 

a trust, formed under jurisdictional trust laws, by at least providing information to 
a trustee on behalf of a beneficiary along with a set of access rules to be applied by the 
trustee to selectively permit a user to access the information in the trust; and 

means for automatically providing selective access to the information, in 
accordance with the set of access rules, based on an electronic communication between 
the user and the trustee. 

97. (Original) The system according to claim 96, wherein the rule 
comprises a compensation rule for obtaining a right to the information. 

98. (Original) The system according to claim 97, wherein the electronic 
communication comprises an electronic funds transfer. 

99. (Original) The system according to claim 97, wherein the 
compensation rule is integrally associated with the information, and wherein the 
implementing occurs as a result of user interaction with the information. 

100. (Original) The system according to claim 96, wherein the information 
comprises a patient medical record. 

101 . (Original) The system according to claim 96, wherein the information 
comprises consumer entertainment media. 
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102. (Previously Presented) The system according to claim 96, wherein 
the trustee is interposed between the beneficiary and the user, the trustee maintaining an 
anonymity of the user while accounting to the beneficiary. 

103. (Previously Presented) The system according to claim 96, wherein 
the trustee is interposed between the beneficiary and the user, the trustee characterizing 
the user based on a classification of information usage, while accounting to the 
beneficiary for the use, without specifically identifying information usage of a user. 

104. (Original) The system according to claim 96, wherein a transfer of the 
information to the user requires an electronic transfer of value from the user to the 
trustee, further comprising the step of accepting the value by the trustee while stripping a 
retained transfer record of an identifier of the user. 

105. (Original) The system according to claim 96, further comprising 
means for receiving an identification of desired information content from a user; and 
means for logging the access employing a digital signature of the user. 

106. (Original) The system according to claim 105, wherein the digital 
signature is anonymous with respect to the beneficiary. 

107. (Original) The system according to claim 96, wherein the user is 
required to enter into a restrictive covenant for access to the information. 

108. (Original) The system according to claim 97, wherein the trustee 
manages access to the information and implements the access rules as an intermediary 
for, and communicates compensation information to, the beneficiary. 

109. (Original) The system according to claim 97, wherein the information 
has an associated compensation value, and comprises digital media information, said 
digital media information being associated with subsidy content, wherein the user 
accounts to said selective access providing means for use of the digital media information 
offset by a value for subsidy content. 

1 10. (Currently Amended) A virtual trust system, comprising: 
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a set of associated selective rights held as at least a portion of a corpus of a trust, 
for restricting at least one of access, use, storage and transmission of a respective set of 
defined content information, organized as a legal entity under the laws of a jurisdiction; 
and 

a trustee acting under the trust laws of the jurisdiction, receiving the associated 
rights and implementing a virtual trust in accordance therewith 

wherein the trustee communicates through an electronic communications system 
to selectively convey permission to at least one of access, use, store and transmit the 
respective set of defined content information . 

111. (Previously Presented) The system according to claim 1 10, wherein 
the information content comprises media information, and the rights comprise economic 
rules. 

1 12. (Previously Presented) The system according to claim 1 10, wherein 
the information content comprises medical record information, and the rights comprise 
restrictive access rules based on an identity or characteristic of the user. 

113. (Previously Presented) The system according to claim 1 12, further 
comprising the step of transmitting, from the trustee, information content in accordance 
with the rights. 

114. (Previously Presented) The system according to claim 1 10, wherein 
the trustee controls the information content and implements rights-based restrictions 
without requiring access to the information content. 

115. (Original) The system according to claim 1 10, wherein the defined 
information content is provided as a set of records, each record having a plurality of 
portions, at least two such portions being associated with independent cryptographic 
keys, further comprising a database index providing an association between a record 
descriptor, a record identification, and a set of limiting access rules for each privileged 
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database record; and a cryptographic key database, for storing cryptographic keys 
associated with portions of a record. 

1 16. (Previously Presented) The system according to claim 110, wherein 
said rights are a set of rules selected from the group consisting of one or more of role 
based access rules, and context based access rules. 

1 17. (Original) The system according to claim 115, wherein each of the 
portions is encrypted with at least one cryptographic key, said portions being 
independently accessible. 

118. (Original) The system according to claim 115, further comprising 
means for accounting for a decryption of an encrypted record or portion of a record. 

1 19. (Original) The system according to claim 115, wherein the records 
comprise medical records. 

120. (Previously Presented) The system according to claim 1 10, wherein 
the rights are interpreted in accordance with a database of jurisdictional trust laws. 

121. (Previously Presented) The system according to claim 110, wherein 
the rights are jurisdiction-dependent, further comprising an input for receiving an 
identification of a relevant jurisdiction. 

122. (Original) The system according to claim 121, further comprising 
means for resolving inconsistencies between a plurality of relevant jurisdictions. 

123. (Previously Presented) The system according to claim 121, further 
comprising a plurality of sets of rights, each set of rights being associated with a different 
jurisdiction, further comprising means for applying a set of rights relevant to an 
associated jurisdiction. 

124. (Previously Presented) The system according to claim 110, further 
comprising a transaction log including a digital signature of a transactor, wherein the 
transaction log may be audited through authentication of the digital signature. 
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125. (Original) The system according to claim 124, wherein the transaction 
log may be audited without revealing an identity of the transactor. 

126. (Original) The system according to claim 124, wherein the transaction 
log audited reveals an identity of the transactor. 

127. (Currently Amended) A transmitted medical information record, including 
patient-specific data, comprising a plurality of medical transaction information files, 
associated with the specific patient, each medical transaction information file being 
separately encrypted, and being subject to a separate role-based access rule and m a 
searchable index identifying a content of said medical transaction information files, a 
search of said index being role-based rule sensitive to withhold index information from 
unauthorized users. 

128. (Previously Presented) The record according to claim 127, wherein 
the record comprises at least two medical transaction information files, each file being 
separately encrypted. 

129. (Previously Presented) The record according to claim 127, further 
comprising an access rule embedded in the medical transaction information file. 

130. (Previously Presented) The record according to claim 127, wherein 
the access rule is not encrypted. 

131. (Previously Presented) The record according to claim 127, wherein 
the medical transaction file encryption comprises public key encryption. 

132. (Previously Presented) The record according to claim 127, wherein 
the medical transaction file encryption comprises multiple levels of public key 
encryption, employing differing keys. 

133. (Previously Presented) The record according to claim 127, wherein 
the medical transaction file encryption comprises a first public key encryption employing 
a patient-specific public key, and a second public key encryption employing a recipient 
specific public key. 
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134. (Previously Presented) The record according to claim 127, wherein 
the medical transaction file encryption comprises a public key encryption employing a 
recipient-system interaction specific key. 

135. (Original) The record according to claim 134, wherein the medical 
transaction file encryption further comprises a first public key encryption employing a 
patient-specific public key, and a second public key encryption employing a recipient 
specific public key. 

136. (Original) The record according to claim 134, wherein said recipient- 
system interaction specific key interacts with an applet wrapper to decrypt the medical 
record. 

137. (Previously Presented) A system for managing the record according 
to claim 127, comprising a database system for hosting the medical transaction 
information files, and an accounting system for accounting for access to a content of each 
of said encrypted medical transaction information files. 

138. (Original) The system according to claim 137, wherein the accounting 
is a financial accounting. 

139. (Original) The system according to claim 137, further comprising an 
audit trail. 

140. (Currently Amended) A business method, comprising the steps of: 

establishing, in an entity distinct from the caregiver, a right to hold a medical 
record or associated access permission on behalf of a patient; 

charging for access to or permission to access the medical record by causing at 
least one of a monetary transfer through a monetary transfer system and an accounting 
entry in an accounting database representing a proposed monetary transfer; and 

maintaining storing a record of at least one of each access of and permission to 
accessj the medical record in a database . 
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141. (Original) The method according to claim 140, wherein the access 
permission comprises a cryptographic key. 

142. (Currently Amended) A business method, comprising the steps of: 

Establishing under jurisdictional trust laws , in an entity distinct from a rights 
holder, a virtual information trust to hold a content record or associated access permission 
on behalf of a rights holder; 

charging for access to or permission to access the content record by causing at 
least one of a monetary transfer and an accounting entry representing a proposed 
monetary transfer; and 

maintaining a record of each access of or permission to access the content record. 

143. (Original) The method according to claim 142, wherein the access 
permission comprises a cryptographic key. 

144. (Previously Presented) A method, comprising the steps of: 

defining a set of access rules associated with information content; 

transmitting the associated access rules to an intermediary; 

automatically implementing, under control of the intermediary, the associated 
access rules with respect to the associated information content, the rules being 
implemented dependent on a context of attempted access; and 

accounting, by the intermediary, for access to the information content and 
respective context. 


Felsher-201.1 


- 19- 


